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[0001] *&m\z: mk^mmm^^m^um-r^mmm^'rMz.m^ & 
[0002] ADSh^yt^T^^-^^itm^r^mmmmm(D^R\cm\ xe^/wts 

[0003] tr^-e, iis?, sft mm^*-hfix\, ^^y'yym^tmnmm^w^n 
z>i>K mu<D7FiEffiffite£iz-£^x, ^m^^iwmm^m\^K.brix^^^ 
1st- >ym-%-ikm*w&-fz>"iffe&fc3bz> 0 ^^mmm.M^htix^ 



ATTACHMENT "A" 



[0004] E53fi % &m?$tti \zmmisntz&*<Dmumis^^7F-rh<Dx~-hz> 0 ms 

^93atel@S'J#IIKa£. #^^ir>^91<bS{f ^M93bMS'J^IKb£:. H^^T 
i? 9 1 i^-ff §£©93n Jii@S'Ji^Kn£ W^WLTV ^ir-TSo 

cooo5] £1\ ^Tcogft mn93a~93nx^m*mmsMK%j£#-tz>jjmz<>i<^xm 
w-rz>o mmj^?9i^ &m*pmmsMK*ft!&u ^*ii^r«sMK£r-9- 

— s<92\zmmi-Z> 0 ^tb^tb<DSfS^M93a~93ni:^J6*^rUTV^ffiS'J 
HlKa. 1Kb, • • -IKn^S^. ^©^S* P^SMK£lf£-SHfcU ^<D^^^CE 
nc (IKa, SMK) . Enc (1Kb, SMK) . • - • . Enc (IKn. SMK) £*£-£-Lfc|I£Bt-$§- 
^#ii4 , rB^ii?¥ENCSMKG=Enc(IKa. SMK) | | Enc (1Kb, SMK) | |-*« 
Enc(lKn, SMK) £LT^lfc<«fB^m93a~93n^ftttTlBf§-r3o * | 

I "tt^|B-^T^^,Enc(K, P) te^i\MK*m^X¥-X?*^ik\JtM<D 
m^Jt&Mvk-tZo ft*3. ##W;£iifcltC:fcVvm. Bt^b*®^P^#iS¥ENCSM 
KG©rt^S'J'[f^(EMM), WJIiIKa~IKnCDrt^^-|i(Kiii). *®<£ 
P^SMK<Dri:£!7-^(Kw) ^^frlsfA^V^o Bt^b^S f P^H^EN 
CSMKG^Sifbfcitm»Sm^93a~93n(4. Ht^b*®^^liS¥ENCSM 

*il^P^iiSMKSr^#i-5 0 ^^-r^tfClJioT, 
m^S93a~93n-e*ii^*il 4» P^^MK^WlTSCl^tii^o 
[0006] ^{C, ^r<Dg:{f ^m93a~93n^. F^^^^^^^tt-^^^V^ 

^msK&&^i-z>j5m^<>\,^xmwirz> 0 -u— ^9212. *^sk^^l. 
^irmw93a~93nk&m^x\,^&m*mmsMK\zm^. w^msK^ 

-SHfcU -^cDBt-§-^CEnc(SMK, SK) £fl£^*^ENCSK<tLT^ffr<7>§:jB£E 
m93a~93r.-[^^Ti£ffi-5 0 B£^t*W^NCSK£^mL^$fc<D^^£ 
S93a~93nll. *ii^P^liSMK(c:5<5#Bt^k**iiENCSK(D^-§--ft;^fir 
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*«SKS:**-rsri:iStiJ3tE5 0 fc*5, ^#fF^l fdfe^Ttt. *fir«SK<£>r2: 
Sr^7>^/HB(Ks) . Bt^b*il^ENCSK^r^^**tf « CECM) £fc;fc/e 

&z> 0 rr-m. sfs^m93a^D^slJli^i-ss^^ilal-^t:-r5^{c:ov^ 

^<92(^{B-r5 0 -e©^. g{f^m93a^^#L-TV^giJ#IKa^|^<^-C 

^=g-Bt^Enc(lKb, SMK), - • • , Enc (iKn. SMK) ^^Ufeffi^Bt^-fk* 
ii * r^l^ENCSMKG =Enc (1Kb, SMK) J I • • -Enc (IKn. SMK) bl^X^ 

m^s^e93a~93n--sa{f -tz* t?-rz>^ti<i£.y, ^mmm93 a u^-<D^m 
git mm93ax^ ^m^mmsMK^mn^^t^. &^msKimbti?£< 

[0008] -<D£??li/*TJ±^£<9, kU&^l-ioT. ^itmW93a~93n(D?h(D{pltlfr 



II II 
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^#fF^C^3 : TTHE ART OF COMPUTER PROGRAMMING Vol. 2 
~ SEMINUMERICAL ALGORITHMS j DONALD E. KNUTH W I 
SBN 0 — 2O1 — 03822-6 

[0009] mtmW 9 3a~ 9 3n<D7h(Di»Itlfr(D%:{m ^Mf -S^mTV ^{@S'J#^IE 

|iSMK{-i^-rO^'ff^M93a~93n-e*®(^{i:-efeofcfci6. -^(E^IE&gfB^ 

d^aS^^^^v^slS^LTV^Co 
[0010] *mWfe. JbfBHM^^5^OT. ^#{dior^^ii?rS*^^fc5FE 

[0011] ff^ll^tf^ejlte, *^Tli«rSfS-t"5«iiB^v'^A-xf*>oT. fulEiiiaff 
— ooftIfE{@S'J c PraiiS¥*'g-Wfe^btLTio'9. fulfil?— '<<hiulES:lli£g 

c/)^fL^tL«ii{wsg^^L-c®ff "5itg-cfcox. ttiiE-9— y<&. mm^mzteMi 



1B*«Srl**(kUT, Bff-iHt^fcSrififcU ituMM&nr-^ii. Sffffi^gS 
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^^mmx. ummm— mm ^ mmmR ximm^m mw&m * mm±^^ 
[0013] it Jkmsic&ft&^w ii, ft*^i iz.mm(ommt A-cfco-c, tuis-^— 

fete. tuMm^'fEIS'J'l 3 ^^*^^^^. v^^— o^iuismu^^^ 



mm * p B ms%fft£-i3:. ntmm—>*TJ±m&^m%L u— £i±<Dm-mm * m 
m±j$mz.&^4Lj&£ftz>. -u±(om— mm ^ mm^b^m-mm ^ mm 

, wmm-mm * mmm ^mtm^m^Rumm^m mw&m 4> mams, 
&m<pffim&±!&u Mfzmm<pmm%:mi^ mm&mm&m^kvx 

[0014] it ^m^&vz&wte, ft $:mmn<Dm%m y^fAx-fcox, mw<Dffim& 



mmm^^ti^m^ mm^m(om^it^m\ m^(D^4t^m^± 

r^si^*-a-«:. ^(DiuisH— ^-rtifr— o^tffis^— 
AMit^^^^mufss'j^raii^^^-. tuiB|g-#iiif $g£j«*£tt. mis 

[0016] it*ii6{c:*D^5^§gi4, M^iiB«6<7)iigam^^A-efeo-c. iffie^fa-f^ 

m^tam^m mm^ffltif^ -ttite. mm^mt -r&mmm nmmt ut. ^m*. 
$rtu^u tuie^ft mm*, ^^^hh.tc.mmm^m^^i-t^mmm^m^t 



cools] m^m i3:*5 vz>$£Wfe. m^mML<vmmm~>*TJ>.x*h^x, Hufs^gfr-ir 
loft*. Mfzmm&&ftvxwmv-^mm&ti. iuie^xam^m^-s- 

[0019] tmm^tf&mwte. m^mm^mmm ^wfcot, mib^^a 

[0020] |f*iHO{C*5^-5^P^«. ff*il7|2ttcD^SEm->^^A-efooT. ttffiMBSfr 



[0021] ftziSSlll-SStf fit. If 3M6fa*£^IEfB WfAtfeoT, IMfcOflWS 

mfs.mmm^i^miRu #*e>taiEWJ#fc£rgi-, mtzmmm^^t^ w. 

[0022] ff*^Sl2^joftSI§^«. lf*^6|E4fe©«iE^^xA-efooT. ^©tulE 
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[oo23] fs*^i3^*5{ta^p^«. ft ^m2mm^mmt^TJ^x^x, tammm* 



[0024] IS*Iil4^jo{t^Wtts fi*^2fB«6<Z)iiiH{B^7-^-efooT. BUlB«^ 



[oo25] is*iii5^jo(t5^pj{*. m^k^mM^mMt^T^xh^x^ m^—^ 



[0026] ff^5l6^*5tt53§Wi. f»^^2|E«©|iiEft^^A-efooT. HufBg«^ 

[0027] m^l7l^i-f^m^ If *54|E«0«B^TA-eS)o-C, tufB^Zl^ 
[0028] f»*^18{c:*5^^PJf4. *^r«SrEfiri-5^—^^, flWE#3r#fc£rSfSi-5« 
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[oo3o] m&ig20iz3svz>mwi-±. M#m.i8tiMi<o&mmwKh<>x, mmcDmtz&m 
^±(Dmmm-^^m^m<D^n^n^m\^mm^m^^tir^tx 

[0031] m3tm2i\z&tfz>$£wi-z. m>km2omm<D^m ntfcot, wmmm^>mm 
[0032] m?km22iz}ortz>$£Wte, it ^i8fE«fe(D^f ii-efcot, MiEiiiEm^ 
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[0033] »3fcg23fc::i3tt3380IB\ If jfc*gl9fE«i<£>S{f ^«T*fco-C »<Z>fusS®SiJ 

*M«jR#*fett. Bait 1 mmemtt&fc£&* m^mmw&tt-mm 
[0034] ft*JS24tc*3tts3swr±. m^m2omm<D^mmm.^hox. mwwmmmsn 
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[0035] m&i£25\z&i-fz>%gwte, it y^mimm^m mux&^x, mm^itmw^ 
m*mmtkj&#:\tt, im-mwRximw-mw-^^x^^t^m 

[oo36] m^26ia$i-fz>mmz. ^m^um-t^—^t, mm^^vxmm^ 

[0037] If $2g27\^&tfZ$£Wtt. m^26mm<Dyu^J>.X^oX, W^(OmU^ 

—u±<v£fEmw&m*mm±j&tt^M^ftx&v^ wm^mm m* 
m.^m^mm±^.^m^ mm^m^mm^±^.u w-m&m*mm*m\^ 

[0038] If >&m28^tdtfZ>&W\-&. If *^!26!5*<D7°D^AT-feo-C. ^m^tuia*^ 
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[0041] 31 {Cfc^-S^PJ (4s »*^26|B«(Z>7 P n^A$rfB^Lfc|«#:-efc^i 

[0042] m#?£32\ZLl8tf&3&mt£. *^«SrE^rrs»E^^fe"C*>oT. MfBlilEfg 

T^^t. tuts*®* mRnm&w mmmm&&m^ mm&mmzmnirzm 
®mmmm*bte&>*TJ>.m&^mMM&$:femirz^y7k. mm&mm* 
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[0043] ff*^33JC*5(t^^^ »*^32{csa«c©«iiam^j5feT?fco-r, m^tuffi 

fi»j*in«&«r£*. unEafflflr^^y^fctt. ~-&±<D&&ms&& 

[0044] tS*^34lw*5ft«^6Wtt. IS*^33^BE«i©fliiE{S^iSfe-efcoT, ful5^g£fE 
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[0045] If *Jg35lC:jott53§PJ3fi. If *^32f2<fe©SigH{t*"&-CfeoT. »t<7)f!ulE^ 

m^m^M^m^ tijiE*M©i5£-§-^£m\ m^^-ft^m^ 
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[oo46] ft^ii36^*5ft^0^fi. m^smmcDmmm^-^hox, tt-mm^m 

[0047] ^0J<z>|iiam^^^^J:tbtt\ ^fiaot, Sit £^{c:ffia6&;i:*vr^ 

[0048] ^o^r^ii^m^sy^^ii^^^^tLSi^^L/ccD-e. % ^ 
tjl^toj * p^<d rait m^mtifckvx^ m<9<D<m\ * v vc 

[0050] [mi]^p^o^^^i tcjo^5ii^r>^Ai(DtK^iii 

[|El4]*B0^^^^^1^^^^^tf^^^ll22cD^0iJ^i-|lI 
[ll!5]^PJ(D^^^l(-^^5m-~>^^^^»SPGI_l(D-^^ 
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-rm 
nm 

m22^^m<Dmmmmi\^i^m-^m^n±^i26(Dm}&m^-rm 
m23^^m<Dm^mmi^n^^-it^mmENcsKG(D~mt:7^-tm 

m25]^m(DmMmmi\^-f^-^i2(D'y^^m^^mm^spGs 
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m^2Vf^m<D^mcoMmi \^m^mmmi 3a(ommn lt^ms&m 
mz^^m<omM(Dmmi\^^^mmmi3a<D^—y<i2ib^^mm^ECM 

m35^mm(omm(Dmm2\^mmmn j t>^2i(Dm0,m^-rm 

m3®*%m<Dmffimm2\c&mm=msmm±fcU2i2<Dm&M*^m 

m37tt%w<Dmm<DmM2\c&tfzmE.i/^j>.mm&m$M&spGms(D- 

[m38]^ m <Dmi&<DKm2\z.io tfzm^mm fit $gEMMmo— w&^-tm 
[gi39]« w <7>mm(D : mn2 mm^n^^2 1 (DmrnrnMrnmcDmrnco^ 

m4o^^m(omm(DmM2\^n^m^n^^2i(DmE.iy^j^m^^w^ 

m^iw^m^mM(Dmn2\zioi-f^~y<22(om^.m^-tm 
m^^m(Dmm(Dmm2iz^^^j>,m^mm^mu222(Dmi&m^ 

m44^m^(DmMcoMm2\c^^-y<22<D^B.iy^M.m^mmmM^sp 
Gms*%mLtc&?<DW : m<D%itim 



20 

[H46]^W©«©^«2Kl*5rtSgflrie*23a©«^^-rBI 

m49wmm(DmM(D^m2^i5^^:mmw:23a(Dm^n±^2i^mE.m 
m5ottmmcomMmm2iztetfz^mmw23a<D^—s<22frb^E.&mmn 

[0051] 10 ilfsSg 

11, 21 m$£?T-£>? 

12. 22 -jj-w< 

13a~13n. 23a~23n ^-fs^fi 

111.211 bmbwwb 

112 m—m®\tiin±f8M 
212 t&E.mwmn4u&u 

1121 fflPflSKSP 

2121 ^E^fASStW^ 

1122 «JHtim*&*ftSP 

2122 fg— 4>|||ftlP±J$A 

1123 »iiKMiii*#fctt 

113 gmmwttfcmmfemn 

114 m^^js'Jffifa^a 
1141 *-->^^ws«i±j*» 
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1142 m—mm^mmm^itn 

115 ^rA^«*^^ 

2 1 5 %^y^rJ>mmmmm^^\B u 

216 ^H-OSiJ'tffglHlt^ 

121. 221 ^rA^^iii^n^ 

122.222 v^^^^W^^ 
123 jt&mttJ&M 

124 

125 m— ^mmntt&M 

225 

1251 B$^«£j5££& 

1252 &m$>mmmmn 

1253 **liBt^b^ 

1254 fg-fjiUW 

126 jg-^Mlf^/^ 

1261 m-mtmm^ikn 

1262 IgHSJtPSP 
127.227 ^il'IH^I^TO 

1301.2301 msmn^iwu 

1302a m-WJ^P^^li#^ 

2302a M=i®mcpr*mmw&n 

1303a ^-^SU^rp^W^t^ 
1304a, 2304a l@S>J£^$i£l$ 
1305a. 2305a 

1306s 2306a *iitf^SiS^ 

1307a ^mw&umiRU 

1308a fg-*^&#^ 
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2308a f&E.&mm&&& 

1309a %&-&^mmm> 

1310 ttiJlU 

[oo52] mmmmi) 

[0053] gllfciisvv-c iHtSSlOfi. m^«ii^tT-fe^lli^-^l2i:1t#:^{B^ 
glSa-lSni^^^tLTV^il^T^tJ^^-^^^^IB^^^^h 

1"£fc#> l-^^WJ'if^EMMG^m^Sm^Ml 3a~ 1 3n— IBfs -T5 0 

it nECM^m^^mmm 1 3a~ 1 3n— mm -r s 0 mmo^mmm 3a~ 1 3n« 
t^mmm 1 3a fifliisuiiiKa^, i^fT-t^ 1 1 t^mmm 1 3b ji^gia 

o 

[0054] &Mf&mm(Dmm^^xi>o>P\MmzMWirZ> 0 *i\ #^fs^m 

13a~l3n^ ^/^sm— fSSiJ^^^MKIGa-MKGIn^^ "^SU* 
Pp1ii^MKllGa~MK]IGn^ia^-r5^&(-o^Tlft^-r5o H^fTi?^ 

rSjttT3HSi-S. SB-fiSJI 1 Fp3«S¥MKIGa~MKIGn& 
tl t ^~fiSU«t , ra«i^MKIIGa~MKIIGnXt/fflB'J«IKa~lKnSrS^ % §rfs=£M 

EMMG?r^L, ^iScOgjf ^13a~l3n-IHif -f5 0 fiSUffif«S¥EMMGSr 



fcMJEfrfcH* btLfcSH— fiS'J I 3 raSK^MKIGaX^- TOJ tfra*8g£MKIIGa&& 

»Jf IHWe**St»-rS. CK^I-ET, ^g-Sff ^Sl3a~13n^^^^— 
TO 4 1 IS«i^MKIGa~MKIGnft^— iSS'J I 3 P^£^MKIIGa~MKIIGn£r££ 

[0055] 1^— ^l2^*^^KSr3C3^5*&«>»f^K:-oVNTRW«. 

atttB'J^^tf #5ifflf «ECMfcLT«»©S« i^Sl 3a~l 3n— ffirJ-OEflTf* 
. »<^g-fB^mi3a~13nfi, *iHff f&ECM&gffU *r©#iitit«ECMfc-£ 
mS*ii'It^^S'J^SrS{C, ^iHf^ECM^^-^H-CV ^<£>*S|&-#5Ili#&E 

^SK£^#i-5o -©i9l-ET, S:fH^Sl3a~13n(D*^-iiSK^JE^f-r5o 
[0056] **5. *«3g«8T?*>5«HBfll'>^Ai -ct±. mmr***! lfrhZ>¥f>£<Dm®\ 

[0057] £JUta< ^Hfiromt-feSo ^TlC, *g&9Ka*£<g ^7A©-IM 
[0058] <#iiB<f'>^xAl(7)«^> 
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&&<^fB3£fil3a~13na>yft5££;ft>5o 
[0059] g^^^llfi^^ilSK^^^Sl3a~13n^iHfti-S(7>{C:^M^it^T 
&5v-;*^AM»[g£*-£-SPGS£r1f— '<12^ f— ^12^^*W^SK^fi 

£^ie:#iI1f #ECM3r£/&U ^(D^til'lff gECM^m^Sit^gl 3a~13n 
~-f5{f -T -So S^Sl3a~13n{i. -O^Jff ^EMMGSt^*il'|f$BECM^ 

[0060] j^Tt-. r^^«M^^ov^i¥iffl(-iftpji-5 0 mm^iocomm^ 

^X^^ ^Xmmf^^l imSV— 2&T/gfi^gl3a~13ntf)*/&i: 
[0061] <iifaS§10(D«^> 

[0062] <|i^=fT-fe^HCD#^> 

mmt^fim, m2\z.7F-f£5K. m—umu\n, m—mmmn^mi 
2, g^*m^*&^n3. m-mmnttj&mi^ ^T^m^Mmm 

[0063] (1)^-©J«111 
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fc<5 0 

[0064] (2)|&-BSUtiNft£/£SBll2 
[0065] (2-l)»IIW»W»1121 

(piD_i~piD_k) R.xm mm (pk_i ~PK_k) Exm—^^trnGfe 

»(SPGI_l~SPGI~k)Ok|a{(FLAG_l. PID_1, PK_1, SPGI_lK ( 

FLAG 2 S PID_2, PK_2, SPGI_2h (FLAG k % PID_k, PK_k, S 

PGI_k) }&&ML.X\,^Mmffin&®iUll22\Z.T?-t*irZ>o ^LT. -WklKD 

4>a>b, *^7^^"i"o%©^im^^i-s 0 -tux, ii^Lfciao*^^ 
s^feicov^THc, ^nxmsibm^\ mmm$imi2ix*miR&ntz.m. 

— e/^A®^^WSPGI_ii^5 0 rr-e. 7^ffi77^FLAG_i«3|cftffi77 
^FLAG_1 ~FLAG_ktf> V vf ttd^feD x 38 f^f!fcBIJ^-PID_ifcWfi ^f^SU^-PID 
_1 ~PID_ktf>V tLd^fe*). iritPK_itti B8«&PK_l~PK_k0>1/ vf fl 
fr-Q-foV)^— ->^A^^^^SPGI_i{*^— '>^AM»?¥SPGI_1 
~SPGl_k©V^-ftL* i -e$>5i:i-'5c S^^tLfc^— ^xASHg^E^t^SP 
GI_i£r. ^-^x^M^^SPGItL-C^^Ali^^^^fg $P1 15 

-aa^-rs. ^lt. s&k:. sw$tt^raKS'J^piD_ixu9!arafiiPK_iS:» 
isi«iBt#'(kasii23^tti^ji-5o 
[oo66] (2-2)«araiff«»jfrtepii22 

jwra*a»*fii»ii22ftt. gi4T'*i-j;9^. ^#>-^;tib*x5s ^my^^xm 
mm%fr&vmmmRifm-^TJ>.®&^mm(Dkm.{ (flag_l pid_i, 

PK_L SPGI_lh (FLAG 2. PID 2, PK_2, SPGI_2) S (FLAG 
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k,PID_k, PK_k, sPGi_k)}£*friWLT^5fc<p-c&3 0 mtts H4fcfeV^ 

tts wrawysij^piD^i^fjcsur. »iiBH*FK^_ixt*i£— ^^as^^^s 

«JSU WF^BU^Pn)_klc:*tt&l/C »IH«PK_kR^— e^^-MK^asK 
^SPGI_k^.t/^^^7^FLAG_k^^LT V ^tfcflgS^UTV ^„ 

^SPGI_2~SPGI_kt>. ^tt^50(D^— i ^TAS^'Xt(s_2, t_2 x 

u_2. v_2. c_2~s_k, t_k. u_k. v_k s ^kJ^bfflN^atTV^o 

f|— isxT&BMS&mt. WI-^ri^^!c4fi!iS"s_i *t_l=u_l 

*v_l mod N'\ "s_2*t_2=u_2*v_2 mod N'\ - • v "s k*t k= 

u_k*v_k mod N"&mtt£ottx-ib}iX^Z>h<Dk-rz>o Mz-t£, 50©f 

fiTefeO, 0i|^fi2"{l28}^t*-CfcSc "mod N"H3H3^ia»©rtT?*>0, 
f±-<#*«*©ilfcT*)5. W^«T2"{4}t416&«!*U £AmiHC«*-e^V^ 0 ft 

A8Hfe3ESfe(^J:s_l, t_l. u_jL c_l)£rSL&£LT£JifcU -^<£>5*>3o(Dfg— 
^^A&^^ifc (#1 : s_l . t_l . u_l) ^ J rJ^S^Sk±^X's_l * 

t_i=u_l*v_i mod N"\ZLjXA-tZ>ZLtX^mXD— o<7>fg— ^^ASHeSE 
m(#J:v_l)£**5#feftWfc3 0 *^^77^FLAG_l~FLAG_k 
(D^M'fLli, "0"-b^<te"l"XMj&£tiX3o<9, Mx.t£&f&W£i?-VhZ<> **5* 
«38fi 1 -fe^liaS»f^HI*6i-5Ri-tt. ^^77^FLAG_l~FLAG_Jttt^ 
T"l"-efe-5ti-^„ S^^g8SES'J^AIDa~AIDntt, ^th^tKD^mmWl 
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SiJ^PID_l~PID_kMtLW^&M£<^ #)xJi\ ^tifixl^Sii 

[0067] (2-3mmm^itmi23 

Sft®ffmS^AIDa~AIDn^T>'fiS'JiiIKa~IKii^Ti&#i-^„ ^LT, £T 
S^B^g^iJ^-AlDa^^fbT, St J£LTV ^^SU^IKafdgoV ^-C£8fMPK_i 
<Dm^t&m\ ^(DBt«SrBf^b^r B mENCPKa=Enc(IKa, PK_i)£U 
SmSemSiJ^AJDa}CMJ^#f^o ^ET, •fdl(D^fi^«mS'J^-AIDb~AIDn 

^XBnc (1Kb, PK_i) , - • ■ , Enc (IKn. PK_i) ^rBt^k^^iiENCPKb. • • • 
„ ENCPKn^E. ^tt^n©S«^etl^U^AIDb~AIDn{^^#^„ ^ET. 
S6-e^-r,t5^. «P B 1^iJ^PID_iS^«^S»J^AIDa~AIDnS.t/Bf-§-^ 
ra«ENCPKa~ENCPKn**bfll^$n5^— teS'J«#EMMI=PID_i | | {AI 
Da, ENCPKa}| | {AIDb, ENCPKb} • • • | | {AIDn, ENCPKn} } Srffr&E. 

smtttti? -CfeO . m^i-S^m^gl 3a~ 1 3n<Dfg-f@SU f 1 
302ar^^^^«t^^C^5^^fflV^«^bT/V^yXAi^E^M 

[0068] (3)^mmmMs^m^mmi3 

^mmm.nj^mn^^ii3i^ m7x^-txv^ ^m©S:^si3a~i3n 

^m^^itmU^l^-AlDa-AlBnt. ?:<D£r%:itmm3a~-13n\^lb5- 

{f ^MmgiJ^AlDal^M^^^bnTl/^gm 3att#lSiJiilKa^^E. § 
m^Mi^S^AJDb^^^{tbtlTV^if^Ml3b{iliSU^IKb^^E, g 
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[0069] (4)IKZ:^a»J**^*P114 

^-WJflt«4fej*lf|S114tt. H8lt*«5l^ ig-~>^AS»£j&£Gll41 

[0070] (4-i)#n->;*^MK*«^J&*Pii4i 

REQEMMIlSrgff LtzW&, 6i@<D^Zl^^A^^kl. k2. k3. k4. k5. k6 
&&J&TZo 6j@©lZ^TA|}tikl, k2. k3, k4 N k5, k6Sr^i-5^ifet 

o ^UT. 09-^-TJ;5*. 6fi©jK— k2 ^ k3 - k4 - k5 - k65&ib 

[0071] (4 - 2) S&ZlfiHI ^ IW«£lfr*{fcfKl 142 

^ET. SfS^S^'J^AIDa~AIDaR^SiJ#^Ka~IKnSr^T^#i-^o 
T\ SlB^miS^J^AIDal^LT. ^Zl v-^AM^WSPGIItC^m 
56ffl<D^~^X^^kl. k2, k3. k4. k5. keO^^loCgtfli^ 

MlglWaSJ^AIDafc^U-C^LfcMSrx S£- v^X-^^kl Ull 
^©pf ^^Bt^k^-'lBgiJ=t : »ra«i^ENCMKllGa=Enc(IKa, MKHGa) fcU 
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V \ ^(DBt^-3tEnc (1Kb, MKIIGb) % • • • . Enc (IKn. MKIIGn) £rB£^Hfcfg— B 
SiJ^P^Ii^ENCMKIIGb. • • - % ENCMKIlGn^U ^:iVetl<Dg{f ^fff&S'J^-A 
IDb~AIDn{C*j-j£ttrt3 0 tLT, UlllX^I-J;?^ Sft^g^'J^-AIDa-AI 
Dn^t^Bt^b^Il^lSU^P^fi^ENCMKIIGa—ENCMKIIGnd^^^tL^^ 
-^■fffgEMMII-fAIDa, ENCMKIIGa} | | {AIDb, ENCMKIIGb} - • ■ | 
| {AIDn, ENCMKIIGn}}£ffr&U *©f|:HBB'Jfflr*EMMIl£:, fi£Uf*&&£ 

-ft ^Sl 3a~l 3n<Df5 ~ Bftl 4> M«^»#»l303aTf IflF-^ft JKrHBSJ f BMH$ 
[0072] (5) 15 

^(Om— ^xA^^^SPGnc^i-^^^Ag^^^C^SlJ^SPGIDI 
^^-^X^^^WSPGIl^«^m-^^^«^TOSPGII^M^ 
i-^^xA^^^IIESU^SPGIDlIt^^^^ix^^^^^^P* 
^SPGSSr^fiKi-So ttt, ^©^f«^t^SPGS?r, 1*— ^12— 
ftttT^f-f 5o rrt\ ^^^^W^SU^SPGIDIir^xA^^m^ 

sas'j^spGiDiitt. en*.^ ^^vemi*ss^»-c*>s. ^^mm^ 

A^^WSPGli^-^^^M^iSf^SPGIl^ESiJi-SycfetcifflU^^. 
^^^^SPGlt^-^xAM»S¥SPGIItOt*2/^M^^^1t^d5*%^ 
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SPGIDIi^-r AjB^3t^WsS'J^SPGIDII I43fc< Tfe \ 
[0073] (6)«SUiff#»iafggP116 

g|— <(@3iJif$gEMMI&lP£©^— MJ1*«EMMI^JtS-rS«B"JflMR»ffJ 
-?EMMIDl£|g ~ flBUflHREMMII&t«:©l&— ISBUfit f&EMMIl Zffi 

(omzmmgEMMG*, &m $§gi3a~i3n^ [SHtTgeft-rso --~c% res'JW 
m.-?&>z> 0 &*5> figijfljawj^EMNffljiiflffjfl^ttysij^ EMMiDnri. -tn^ 

#EMMl£3£ Zl WJ'lf ^EMMII^tf yb^S^^^W^^^^tb-CV ^ 
SUW^^EMMGtCioVNT®S'J1f^iiS^EMMIDIti@SiJ«#ftS'J^EMMIDn 

[0074] <m^f±^ll<^W}ff> 

fS^^l 1 2^fg— ->^AM^^SPGlS.t/^—(@S'itf aEMMlSr^fiSi- 
^-®SiJlt^^^ll4i^-^xA$K^^mi¥SPG]]StJ ? ^~iilS I Jit^EM 
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[0075] <Si^=frfe:^ll{cJ:5liW^iB«^fO»f^> 

m-ftmmi i m-mmm&±f&i$i i w *reqe 

mtrTZo (siioi) 

fflSiJf»flffiMMI^Sy«WE«Sll6^a*«. (SI 102) 

WJW«^J*S51 14tt - Bl6T?*i-J:5ft7n— ^^*-h(TKT?^»lS:ttW 
) MoT. »—^^3^He'38R#SPGIlR MJlt#REMMIl£r£$cU f£ 

fiSUfl|«MMn«»J1»«»KflS«Bll6^ai*-f-5. (S1103) 

^j*m&m&8M&spGs%r9-~-'< 1 2^sflrr6- (si 104) 

%— TOif#EMMI&TJ^~ i@JgiJ1f^EMMII*-SmL^SiJ1t$ft^Safs^ll 
6{i% ^_^gijjf^EMMI^t>^i:^SU1f^EMMlld^^5#lS'J1f^EMMG 
^^t, ^<©fiffJtMBPEMMGSSfiSi6itl3a'--l3n^ffi«U ^T^So (SI 
105) 

121 tt % «j|attf**tt«Sll22k:T^-fe^UT. *fi77^ii 5H l"t&5-l©I 
WttS'J^ (09 : PlD_i) MtJHH* (09 : PK_i) k%— s s*7Mmm&&& (0J : SPGI 

G_i)^"o"{cis^-r^o (si 1021) 

jg— >^ A»«aE«H*a^ffli 1 21 ii. i-^r^^ w m ■■ spci_i 
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^-TSo (SI 1022) 

^-^^mmmmmmm.mi2in,mr^mm^m:PiD_i)mmmm: 
PK__i)^mmm^^tmi23^niti-r=5 a (S11023) 
mmm^ w :pro_i) tmmm m :pk_o ^BLTc^ftst^m 123 

«\ ^-ff ®m^t*^^H4— T*-fc*U Sit 3£glf$'Jd L AIDa~AIDn.& 
^{®S'JiiIKa~IKri(7)^T(D|a^#i"So (SI 1024) 

_i)<DS%%-4k&m\ Bf#M^li(^J:ENCPKa=Enc(IKa.PK_i), - --.EN 
CPKn=Enc(IKn.IKii))§r^-r5o (S11025) 

^fL^n(D^itmmmBNCPKa—ENCP}^Km^tm-'mmvtim%nm\^ 

^-r^Stt^«BtSU^-AIDa~AIDn{cm#{j-C. MmmWf- (M :PI 

D_i)^PX.T^-TO'lf^EMMI(^:=PID_i I | {AIDa. ENCPKa} | | 
{AIDKENCPKbh {AnDn.ENCPKn})^r^-rSo (S11026) 

vx,mT-rz>o (si 1027) 

<£ Jg ~*S7CT A^^m^SPGIlS^-ffigiJIt^EMMII^^^^Ibf^ (* 
^^Sll03©Plffl)> 

If ^£f&^REQEMMIl£r§'fs Ucgl ~ i/XT 1141 
(4. 6^<75fgZ>>^rAM^kl, k2. k3. k4. k5. k6£^/&-f 5o (SI 1031) 

fg-fr-^^A®^tl£/&mi41li, 6j@©^~ v-^-X^^^kl. k2, k3. 
k4. k5, k6^b^m-^xA^^WSPGII§:^« 0 (SI 1032) 

a^m^i^f^ (SI 

1033) 

% ~ >^ A^^m^spGii^gmufrB-^s'j * ra«#flf#fcasi 1 4 2tt. 

f@SUii]Ka~IKri^T5i#^5o (SI 1034) 
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m — TOJ ^ r^#l¥Bt^^ 1 142 g:-ft^g!tSiJ^-AIDa~AIDn^^^ 

tRU(#l:MKIIGa==kl, MKIIGb=k2. • - MKIIGn=k6) . Sg-ffiSiJ^^ 
MKIIGa~MKIIGni-r^>o (SI 1035) 

m P^^MKIIGa~MKIIGnOll£^£tTV \ ^(Dm^x^m^ritM— m%i * 

ra«^ENCMKIIGa=Enc(IKa, MKlIGah ENCMKHGb=Enc(IKb % MKIIG 
b) s -••,ENCMKIlGn=Enc(IKn.MKIIGn)t-t"5„ (SI 1036) 

M — ^ P^#l3¥ENCMKJIGa~ENCMKlIGn^b$f *V5 ~ -®SU W#E 
MMII = {AIDa, ENCMKIIGa} | | {AIDb, ENCMKIIGb} — | | {AIDn, EN 
CMKIIGn}}Sr^-r5c (SI 1037) 0 

[0076] &nmwwm$mvg-%-4k&u42^ %&-m%mmMMii^ mzmnmzm 
^H6^m^j-r5 0 (sno38) 

[0077] <1J— ^12tf>Htj&> 

«'«^fe*3^i22. *^n£/&2&i23. &mmm±&i$miRm24, 

ii1t^^l25. m-*S1t^^^l26. itii«#iB*f SB127, kfi*tbm&& 

[0078] (l)i/^A^^W^^f^l21 

*£»SPGS«r£flrU!:»g\ gftbfc^-xA^^^^-g-SPGS^^n?)^ 
^•rA^^ic^JS'JT-T'fc^SPGlDItSPGIDIIlcS^, &—i/XTJ*m&&. 
^SPGlS.t/B-^^M^WSPGH$rttttJU S118T**-r«fc9^^7- 
A3BH63E»»*lftl 22{C*&*fcU *^T«^»l 23-*^§t£/£^*REQSK£ 
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[0079] (2) is*TJ>m&&&BHr1ttt& 1 22 

1 22-{±^>^A»«^*^Sff SP1 2 lSt/Jg-*® 'If «^SP 
125^(D^^W^f!il25lt#®4 3 ^ii^#^1252BL^-*®'WfB^ 
EfcgB 1 26ft tDjjl ~ #&mfc&()CM 1 26 ld»bT^-fe^ BTffiTffcSo 
[0080] (3)*^«^SP123 

m^^itufcm^''^^m^,*w^^i23^^ffi^g«-rss{f^ 

[0081] (4)#aflMR^«KWi«124 

*aflip«^tpi25©i««a*^j5fespi25ifc*— #3r«**ft: 

£151253. fclXtt. »-*iaflm^»l26<0»r^«H«#^k«1261^*^- 

^SK&tU^fi-^o rr-C, |g--#aH»»^fi8i2536»SS-*iiflMR^J«Wi26© 
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[0082] (5-l)l«»a&£jS*P1251 

£j&5£"rl=s*z+v*m mod N\ "r2=t*w+u*n N\ "r3=u*z + t*m 

mod N\ "r4=v*w+s*n N"£S^ 4o©^E«brl. r2. r3, r4££j& 
-TSo ^Ot, ^Lfc^^^rl. r2. r3. r43&>b*j££*b£* H20^-r«fc9^ 
B#««PRG££/£U ^<£B#^MPRG£^-f&J$Jg&1254^ tH^i" S Q 

[0083] (5-2)#«*IH«B&*WS1252 

*a^lBI«©#lfP1252«:. ^F^^C»^SP1251d^iLffez. w. m. nSrgtt 

#5I*IW«SMK£\ ^fe^x.^5^-^^*ii^ra^^"SMK=2* 
s*t* (z+w+c+n*m)+2* (u*s*n*z+t*v*m*w) mod N"{-S^ 

So 

[0084] (5-3)m-**fiiBS L ^k$ISl253 

<£ |S]£R&£ftl 252^b*ii <P RfHBSMKfcgftUi:*^ ^ ©*»»t> W«S 

«ENCSK*16 ~ 1 254 IC tti;t)-r5„ 
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[0085] (5-4)fg~ f&|#p$B1254 

«^pPRG&t>*fW^*^#ENCSK^<bft5. fg— *iHf$£ECMl££j5£t- 
3 0 ^UT. *ji«faECMlSr*iHt«ECM^LT. *afflf«Eflr«S127 

^fcB^-T-So #5iffif#WtS«J J ?-ECMID«4. Wxtf a*£Sfc"?*>5. **5x *a 

3a~13n^*5V^. $g-*iitit $&ECMItSg-*iHf SBECMOfcatOtfiiW^ 

*iiif #a6SiJ^ECMIDndS*<TfeS:V\ 0yx.«. 17— '<12£^t5gmi3a~13 
n^joV>"C. fcSSt*bixfc«-e^-*iHf^ECMI^{B U -^tU^-Cfi 
0-#®1S«ECMnSr^i-S«^*^*>So 
[0086] (6)^-#®flm^S5126 

fg-*ii'|»«E/&m26 % H22{d*-rJ:5t-. !£— *W«**ffc«»1261^ ft 

[0087] (6-1)11 *^T««*{k»1261 

#U ^r0D4 3 d i P>6^B<O^Zlv'^xA|iHe<akl, k2. k3, k4, k5 N k6$:ttt±ii"So 

CSKl=Enc(kl, SK)Sr^-T5o ^bT. ^(D^-^^A^iik2, k3, k4. 
k5. k6tmL-Ob, mWt^ &ftmSK*\feSt<tU B£^kfe«ENCSK2=Enc 
(k2, SKh • ENCSK6=Enc(k6. SK)%±J&1rZ> 0 H 23"C*i" £5 

ft. PS-§-ft**"fl»ENCSKl, ENCSK2. ENCSK3. ENCSK4. ENCSK5. EN 
CSK6£5**£Lfrt>tf>S\ «#{b#*WSENCSKGiLt, ^H^$Bl262|CttS 
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DESBt**F5^^<fc9, &&-rZ>^mmm 3a~13n©^|g_*^#im#£in3 

[0088] • (6-2)^HM^l262 

JgHfOT£($1262te, ^-*^TiiBt^t:^1261^bBt^t:*^ENCSKG^ 

±!&-tZ> 0 ^UT. ^©m— *®'t*^ECMII^*ii'lt^ECMiL-C. *ii'lt^SE 
is tP127-tti^i-5o *ii1f S&ftS'J^ECMIDIIte. ^^(i*iHt^®J 

^ECMIDI^#lft5g^irefc3 0 ^illt^l^U^ECMIDIKi. *il1t#E 

CM{^mTV^5T ^ -^^^--#®^*^ECMI^^-*®^ffgECMII*^IZSlJ 

CMI^-^illf^ECMII^Daii-^^^*^^^^^ *jIlf#&EC 
[0089] (7)*Mlt#SBffi^l27 

*5i1t*BB«i27ri. *5iflNI^»i25©^ii«a»«5i254. fciXB:. m 

-*5H#Sl^gP126^=*!l^l262 % (DV>-f^^^#iH*#ECM^m 
Lfc^ x §{f l£Sl 3a— 1 3n^<D*ii1f ^gECM^SBfS-r^o 
[0090] <*h-s<12<DWifc> 
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[0091] xmffinz^fi ifrtb~>*TJ*wm^mmM&spGs&gmi,tc.&f(DWarE> 

A^^^PSPGI^^Zl^^A^f^^SPGII^ai-rSo (SI 201) 
S1202) 

C^-w-^l 2^fs^l3a~l3n^ §rfcft*^SK£Kfsi-3^EbfE>> 
5 D (S1251) 

*iiflt m±j&&m9iM 1 24 1 2 5^ - *® m 

if #^gpi25£514RUc^g\ ^^S1254^ iltfo S*H-. ^~#ii'lt#^ 
^126^r5S^bfe^. ^^S1260^iltfo (S1252) 

*^riilt#M^ 1 24/^b*^riisK£r§{s Lfcm-*®it^«^ 1 25 f*. si 

ffcz. w. m. n£«-T5 0 v-^^^»^^122{^T^-fe^U. M— 

^iH-t^o *LT.TO^b*l^O©N^SagSfe4fejft^"rl=s*z+v*m mo 
d N'\ "r2=t*w+u*n N'\ "r3=u*z + t*m mod N'\ "r4=v*w+s* 
n N"£rg^ 40(7)Bt^»rl. r2. r3. r4££/&-r&o £ji£Ufc40C7)B#g^i$[r 
1. r2 N r3. r4^b«^^, B3«^PRG££j&1-5 0 (S1253) 
^<Z>B#^iC$PRG£Jg -©J^SBl 254— t±5^i-?)o (SI 254) 
^il<p^^i^#^i252{c:|pl^TSL^:z, w. m. n§rl±5^)i-^o (S1255) 
^"PP^il^^l 252(4. TO^itS¥£/££C1251>^b£lJ&z. m, nSrStt 

wspgi^s^u ^(o^hm-'y^^mmks^mRi^^^-Bojc^ 

ttttSi"2)o ^LT. ^il-PF^ItSMK^ i^fe^-x.btL5-9— y<^m^mm^^" 
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SMK — 2*s*t* (z+w+c+n*m) +2* (u*s*n*z + t*v*m*w) mod 
N'^£o^TEi#1-5o (S1256) 

±}&Ltc&m*fflmsMK&m—&&mv^iritMi253\zmjj-tz a (S1257) 
^-^^Bt#-f^i253«. m~mmm24^^msK^mu 

±J&L, *©B|f^fc*^«teNCSK^~«!WWSP1254fca^j-J-5 0 (S1258) 

»-*jH¥gui254tt. &mmm$±j&m25ifrtbB%m^m&pRG*§;m^ $. 
^ECMi^iiw WECMtvx. &mfmmimm27^mjj-rz> 0 ^^si26 

4— iitPo (S1259) 

#U ^^4 3 d^6'(@©^->'^A«|ikl % k2. k3. k4. k5. k6£rtttHi-3„ ( 
1260) 

^~^m^^tUl261l^ ^tMiLCOm— ^^^MWftkl. k2, k3. k4. 
k5, k6£rg$^ ^ftSK&BlHHfcU Bf^fc2^»ENCSKl=Enc(kl. SKK 
ENCSK2=Enc(k2 % SK) S • • ENCSK6 = Enc(k6. SK)S:^J*U Bt^t* 
^■«ENCSKl~ENCSK6SriS^LT, fl£#fc#^S^ENCSKG&£j£i-5. ( 
S1261) 

£"#^»*-JHfcS8l261tt, Jfc^fc#*r«l$ENCSKG$\ ^H*J^1262 
(^tti^i-5o (SI 262) 

m^itel262(i, m_*^ii^^^l261^-ibBt#{t:^iiPENCSKG 
^SftEfc4i^s^-*iiit«ECMII^fo5wi:^i-*ii1t«WtSU^ECMIDII 
£I/B&#fc#^«i¥ENCSKG3&>bft*K 3§~*iltf fRECMHSr£j£U -?:<^Jg— 
*ii'lf $8ECMll£*i§ti? ^ECMtLT, *iHW$gfBlt£fll27— ttS^-T^o (S126 
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3) 

&mmmcM&g:isi'tc&mmmMimUi 27#. ^mmwi3a-i 3n^*ii» 

fRECMSrIEff UT. ^T^ a (SI 264) 

/£<tIM1^<^Ttftl^£?Tt/\ gft^gl 3a£4&<£>Sff2£m 3b~ 1 3nt<D 

[0092] <g^Ml3a(D«^> 

%mmmi3 a \^ 027^1- £51^. mmm^m m3oi. m-ra^^ 

^#351 302a. ^-{@S'J^F^^Ife#^1303a. ^SU^^l 304a. -fEFS'J^ 
m$m@i1® 1305a. *iHf$g^§£&1306. ^-^1^1307a. 
£&1308a. ^Zl*^-|iS[#^1309a. ttS;bS&l310. ^^M^^>o --"C\ SI 
4^#K^I&#SB1302a. f|— ffiSU^F^g£Ifr#§&1303a. ffiS>JiW&$3£P 
1304a. mu™#t*&*fcS&1305a. ^-^1^13073. |g— #^T«i^#$P1308 
a. ^-*^lim#Bl309a. H^ft^SlSaa^^^MmX^?). f@S'J1t#g 
fI2&1301. *®ft^S«^1306. tli^l310. figm^gl3a~13nt*3V>-C 

[0093] (DTOJtimSff £151301 

®S'J1t^<t^l301^^ iJ— /^i2^b. ffiBU«#i^MMG££flrUy&£\ 
Sff bfc^S'Jtf ifEMMGOt (C^^tt^S'Jff ^aS'J^EMMIDl. EMMID 
(SS'JIf fgEMMI^t^^^-fSSiJtf ^EMMII^tbU. fg— • (gIS'JIt 

fgEMMi^i-' mm cpmmmw&m 302a—. m --iisutt tEMMii^iz mm 
^mm^m^i 303a— tu^-T5 0 
[0094] (2)m-m% i i^mmmm^i302a 

m-imm^mmmwmn302ai^ mmmnmtm 3oi^bm-mmmnE 

MMI^giWLfcm-^. ^-fE!28{c:*-rJ:9^®S l Jii*&^l304a^b^l^Mf^ 
&J^AIDaSt/^&J^IKaS:t/Bt-^-ft:^-'l@S'J ^ F^il?¥*'a-ENCMKlGSa^ 
#i"-5o ^UT. S^L^m-iilS'JWfREMMI^b. ^f&S'J^(#RtfPID_i:PI 
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. «Ml^^l3(MfC|Mfi*iX-CV^5«»J«»KaK:«<5#. &gHWtWIH«E]SrCP 

HBB'JW SEMMI© 4> RIWBiJ^ (fcl : PID_k PID_i t£ PID_1 ~PID_k© 
V ^ftj&O Jd^-rSl^k^-fiSJ + (fl|;i«!ENCMKIGa_i : ENCM 

KIGa ifiENCMKIGa 1 ~ENCMKIGa_k<7>V ^fn^) Srffil#U gBF^PK 

KIGa^#J+IBHW&*ftl»l 305a(^^i-^ o 
[0095] (3)^~'(EIS'J4 I ^li^^l303a 

SE-fi»J+IB«»3R»»1303att. ffigiJ-lt^S-ff ^1301^^^-ffiS'JW^E 

SU^AIDaXt«BB>J«»Ka^#-r5o *rUT, gftbfc^^S'JIt^EMMII^b 
-■©SU^ffili^ENCMKIlGa&mWi-So 4BS!l«IKaK:£<5#, ^4>B£-5§- 

Sr5t#i"5o ^(D^#bfc^-®siJi 3 raii^MKiiGa^sij'pr B m^ 

^13053^^-f^o 
[0096] (4)#IS'JiifeMl304a 

«»J«»JWlWl304aH:. IH28-r^1-J:9^. £«£«»J^AIDaXtWBSJ*I 

fiSiM*«Ktt«Sl 304a^»±. »HBBJ*IB«#StiMM 302a^I>'m ~ l@S'J f R3« 
SIR4#$U1303a^P>T^-fe^Pr^fe5. gfgggfiTOJ^AlDalifllx.HEg 

a(l. 0iJx.tt\ ^#fF^®t2{C|E^(DDESBt-^^<7)#-efc'9. ^*a**^S:ffl 
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[0097] ^©fi»J«^»1304a-e»j^n-CV>6ll|F*{b*-- ftai^W^HBMfc^ 

[0098] »!IBWB>J-T-PID_1 Kl*N&UTV ^jg-:X;^A^^i£s_l&m_l£:t*3_ 
lRU t v_i;RtJ t c_lfc:MU-T\ W#£b;ft5^Byfca£ifc£J5fc5Cx*y=c_l m 

»y«#^Ei--5o *7c. teBWtgSbu ytt, 128l^yh©e«S»fe*>9. * 

££fc5£ ,, mkll=s_l*x mod N"v "mkI2=t 1 *y mod N\"mkI3=-u 

_l*x mod N'\"mkI4=-v_l*y mod N"^S<5#4^@©^— fiSU^H 
Hmkll, mkI2, mkI3. mkI4£r«1-5 0 tVX, ^©4te©Jg-HBB'J+IH0fciikI 
1. mkI2. mkI3, mH4^#^£fr3S30^«5ftl&— ffiB'J* IBflS^MKIG 

— ©SUq 3 F^S¥ENCMKIGa£r£j&-r5o i©I-^7^tfs_2~s_k 

^Ut^-^xA|^^Sfct_2~t_k&tJ«|gH^-7 L ASH6gE^cu_2~u_k& 

t;fE^f^S5i^tv_2~v_k^t>'fi:^TA8^^tc_2~c_ktM 

— j@SiJ ^ Pa^mkl 1 _2~-mkI l_k N mkI2_2~mkI2_k, mkI3_2~mkI3_k 
N mkl4_2~mkI4_k^^^f 5 0 ^LT. ' B9Jf WHO^h^h^ba* 
feSU^ P B ^B¥MKIGa_2(=mkll_2 | | mk!2_2 | | mkl3_2 
| | mkI4_2) % MKIa_3, • • MKla_k££/£-r5 0 ^LT, -tJVeiX©»IIHI 
I&5»PID_2- • ■PID_k{C^<5J-J. »jP«^PK_2- - -PK_n£glCP£-5§-{fc;£r 
tTV\ m^tfS— (@S'J c PP^iiS¥ENCMKIGa_2. - - -ENCMKIGa k£r3Efi£"t~ 
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s 0 wm^. m29-r^tio^ f%^km—mM*mm&tttfc^mzMmmi& 

(Dm&^Z^tM (EN CMKIGa_:U PID_l) | I (ENCMKIGa_2 % PID 
_2) | U -•• I I (ENCMKIGa_k. PID_k) }£B£-*HbM— mMfmm&M 

tpmm%£M& (ENCMKIGSa~ENCMKIGSn)ftg{f^Sl3a~13nS{cM^ 

[0099] (5)WJ"PP^Ii^^l305a 

Xjm~mm * P^3£MKIIGa£^-f-&btf>-efo5 0 ^<£>fi£'J <P P*OI^&#Jg&l 305 
a— ft. Jg— figij 302aS:^-^SIJ <P f^lt^^#^l 303ad^ 

[0100] (6)*ii'|f#S:fS£tfl306 

fc*^11f $RECM^^51^^1 307a{' ttJ^Ji-^o 

[0101] (7)Jg-5giRgB1307a 

^-^$|Sl307af4,*aW#Sm^l306>6^*JiW^ECM$rS«Ufc^ 

x ^<D*rfIff fgECM^^tlTV (ECMIDPfc) IX fiECMIDH) 

^S{-.^^*^1t^ECM^^-*S1t^ECMW^-itiiW^ECMII^^¥lJ 

f6ECM^^-^gij1f#ECMII(D^.{@S'J^^^^^l305a^^^~^SiJ^ 
P^li^MKllGa^^#t^r*®tt^ECMI]tm-™'P^lil¥MKI]Ga^m 

-&^mW&Wl 309a— ttt^l-^o 
[0102] (8)^-*^li^#^l308a 

^-^^#^l308a^^-S^l307a^^-®SU'PP^ii^MKIGa 
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iSPRG^ffitt-r-So ^co^. -t©l«Se8aSPRGA^ B#3ES8ftr:L r2 % r3. r4& 
fl&tiJU JtUT, WJ*IH#E$MKIGa)&*P>3B— ffi#J^ RHfenkll, mkI2. mkl 
3, mki4<£3Sffi'i-5. ^©m. W^bttSSff ^g^i!4 3 P^li^^:"SMK= 
(rl +mkll) * (rl +mkI2) + (rl +mkI3) * (rl +mkI4) mod N"£rg»e:. * 

•fku *w«isK^#-r-5o ^lt, ^(Z)*^riisK^ai^ifBi3io— t±5^7i-So 

[0103] (9)m-*^Tli^#^1309a 

~ 1 30 9a7bK M—MlRffi 1 307a^P>^ - fiSU ISfi^MKIIGa 

XURj|5-#afl| $gECMIl£gfgUfdi£\ S1\ JgZlBf #ffc*^«PENCSKG 
2>>£k ^-Bt-^-ft^^fiENCSKl. ENCSK2, ENCSK3. ENCSK4. ENCSK 
5, ENDSK6£ftjffi-f 5o ^UT, ^-<B»Jf HI»#MK]IGa^*tT,TVNS^~ 

Vfr&X^ 0~HiF#<k*^r«ftENCSKl. ENCSK2. ENCSK3. ENCSK4, EN 
CSK5, ENDSK6^V^-Ttbd^^— S&Lfclo©llf #;fc&«#fbb 

% *^r«sK*iRfl'-t-5. ^<D&^msK&tiit)m3io^m£j-rz> 0 

m—^it^mBNCSKl. ENCSK2. ENCSK3, ENCSK4. ENCSK5, E 
NDSK6<DV^-f^^^— 0%m$L-fZ>jj&:kL.X^ ^-*5iW^^$Pl26ld 
^WC, Bt-^-fk*^T#i?¥ENCSKG^4»|^ ^^SrBt-g-i-SOJ-^bfc^ 

^(O^-^^ASJ^^BItSiJ^SrS^. ^-Bt^k*^HENCSKl~ENDSK6 
[0104] (lO)tttfjgBl3lO 
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[0105] <Ste§£«13a<Z>»f£> 

[0106] « m&frk^* 1 1 36*b WJft«»EMMGSrS«U*:«F©lbf^ » 

^5g^^ll^^i@S'JW^EMMG^S^tU^SiJ'lf«if^l301(4. g 

MH^atti-rSo (SI 301) 
WJftaSflrtR 1 301 tt % Jg-ffigiJMEMMlSrig-^'J * IHM&$&g9 1 30 

„ (S1302) 

gpi 304ad^gffi^«^S'J^AroaS.^SlJi»KaS.OT^t^— -(SS'J * KH*3$ 
^ENCMKIGSaSr^#i"5„ (SI 303) 
^_ -!@SlJc(n^|i^#aJl302a{4, Sfl bfclg— ' IBSiJtit^EMMlA^, ^BITO 

gij^piD_i. rv. mmm^mui304\^m^thx^t'^mmmmm^AiD a ^ 

ttfo-fZ^itM ra«KENCPKaSr®#i-« 0 (S 1 304) 
5o (SI 305) 

^ 302att, Bt-^k*— TOJ 4" H^SMfc-^ENCMKIG 

Sa(D«P^b. ^— raiff&EMMl^^(7)^F B ^^ J PPID_i{C^i-5»t-^-'fk^ 

J&— l@Jg'J«P^li^MKIGa^#i-5 D (S1306) 
81-BS'J 4- P^effif 302att . « 4NfcL*Jfc— ffl»J «P ^H^MKIGa$r{@ 
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SI4«W«WfcfftSPl305atC|&tt-r5. (SI 307) 

mwrz>o (si 308) 

•l 3 ENCMKlIGa^#-T ?>o (S 1 309) 

^^ii^ENCMKlIGa^-^-fb^r^o (SI 310) 

m—m%itpmmmw&m303att, m^^tzM~\mm^mmmMK\\Ga^m 

m^mmW$\n-L305a\^Wifa-TZ>o (S131l) 
C ^< 1 2^b*ii1f ^ECM£gfBL-fcfl#<D»f£> 

•tt#ECM£rfg— StRtBl 307a ^ffl^J-f-So (S1351) 

ECMIDKD*£\ ^(D^ii-tt^ECM^m-^iilt^ECMItU-C. WJ'f'intttt 
$3*fl 1 305a^^m— mm * F£ WMKIGa£r&#U t©I-i»J * fl^MKl 
GaR^— *iitiS«ECMlSr^— *^"«5l#«5l308a^ffi^jU, ^^S135 
2— i§tf„ feU ^cD*®ff $SmS'J^-^ECMIDIl©#^. W^iitf $gECM£rfg 

MKlIGa^^fL.^^^-fS&J^P^Ii^MKIIGa^^-^tf^ECMIl^ 
-*^r#l^#^l 309a— fctl^U ^xy^Sl 356— iil>„ (Si 352) 

£fll308ate, B-*ii1f fSECMI^^^F^icPRG^ttttJL, ^©t, ^<DB#^ 
»?¥PRGa^ S§«trl, r2, r3. r4£rfc&fctJl-£o ^rbT. JBHBBUfWMW* 
MKIa^b^— faSJ^RHRmkll. ™kI2. mkI3, mkI4Sri*tBi-*. -tLT, ^fe-^- 
xfe^gfe^B^ii* B3«£J$*"SMK = (rl + mkll) * (r2 + mk!2) + (r3 + 



47 

mkI3) * (r4+mkI4) mod N"£XKl. *af ra#SMKtff-#1-6„ (S1353) 
fg— j&frm&m&l 308a«\ fg— #ifitf«ECMIi6»fel^b*^r«ENCSK& 

, *qg-«iSKSrffit#-r 5. (S1354) 

1358— ittfo (S1355) 

#g&1309af±. B£#fc*W«#ENCSKGA^ fgZlB£^l^r#»ENCSKl, E 
NCSK2. ENCSK3. ENCSK4. ENCSK5. ENCSK6£rtt£iii-5o ^ET. %ZL 
^BWrME^MKIlGafclX^T. ^©6o<Z>^rB£#fc#**»ENCSKK EN 
CSK2. ENCSK3. ENCSK4, ENCSK5. ENCSK6©VN-f ^^-TSlo© 
Bfp-g-XSra-^fkb. *^HSK^#i-5o (SI 356) 
^-#^S£R*§m309aH\ #^TliSK^ta^^l310-ffi^i-5 o (SI 357) 
ttJ^^1310f4. 1308a. fclXHt, ^Zl**»I&#|E51309a 

1358) 

E*±a^ #igafg^xAio«^ii*^fessmigsi3a©«^i»frcfe5„ * 
[0107] a)m~m^mm^WL^uiso2ax^ m— m%wmm&*fc&irz>tM^ m 
omm&&. ^Mft^mmm 3a~ 1 3nx*mtt 0 

304a^e>#s^s i£«Bssij j f-xu R fis>j«iA^ ^fi^fti(D^mmm.i 

3a~l3n"C^^5 0 

[0108] (iii)^S'Jfi*&^l304aX% IMft&tvCV^Sft ^fififcB'J^ (AIDa~ AIDn)K. 
3a~l3n-C^6o 

[0109] (Mtoj^ ra«»»«i305a-c. te«snTi/^HBsu*ra«i$&t/^-te 
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m 

mmmmi%~m^\ + r^ii^«*ve^s^ii^ 1 3a~ 1 3n-eM&5 0 

[0111] (vi)m-**"^#^l308a-t:\ ^WIiSK^#-r5^^^5M— TOJ^f^ 

mU^fl^fKD^iimmMl 3a~l 3nTW£5o 
[0112] (vii)m-*^"li^#^1309ar% 

ftr*#ftJfr#£Bl 309aT\ #*|iSK^#«^^V^m~-©S'J ^ R9« 
m^fl^fKO^m^M 1 3a~ 1 3n-eM*So 
[0113] <^jfe^Bl<DibfftfcEE> 

^MMMMl K*3V vc. •en^n^m^Si 3a~ 1 3nlc«^^M^i:Sm- 
fiSU^P^II^MKIGa-MKIGn^^-^SlJ^F^ii^MKIIGa-MKIIGn^fiJ 

[0114] £-f . Jg-*iI1f ^ECML&TJ^H@5'J * Fell^MKIGa-MKIGnSr^ V ^» 

^{cov>rmpji-^o i£— MWpgi^MKiGa-MKiGnfi. ^n^nn^-^ 
z_btiz>4-D<Dn— m^mm±^^mtc--rm-mwi^mmmkii, mki2. mki 

[0115] SMK=(rl+mkIl) * (r2+mkI2) + (r3+mkI3) * (r4+mkI4) 

= {s* (z + x) +v*m} *{t* (w+y) +u*n} + {u* (z-x) + t*m} * {v 
* (w— y) + s*n} 

= {s* (z + x) *t* (w+y)+u* (z-x) *v* (w-y)} + {u*n*s* (z+x 
)+v*m*t* (w + y) + s*n*u* (z— x) + t*m*v* (w— y) } +u * v * m * n 
+ s*t*m*n 

ttto "x*y = c"tV^#£fflV>5^£-e, 

.. = 2*s*t* (z*w+c*n*m) + 2* (u*s*n*z+t*v*m*w) 
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5t"SMK="2*s*t* (z*w+c*n*m)+2* (u*s*n*z+t*v*m*w)"<i: 
[0116] Iki^ m—^^nECM\lRUm~BWl^mmmMKl\Ga—MKllGn(Dm^ 

®&mfrbmf&£tlX^Z> 0 tfc. ^-^fc^-lf fgECMIItt. *W^SK£. »©m 

TV ^ifeSft^Sl 3a~ 1 3nWoV vf % ^il^^SK^tti a^Si^-ftoT 
[0117] <HJ£?F^1^^:> 

mw^titctvx-h, ^-^(omm^mm^m^x. m^^m mmtmfe 
tons] m^(omm2) 

^(D^m(Dmm±hx(Dmmi^^j*2\z.^i^xmm-fz> 0 m 
mmm 1 1-*5 v&mmt i/xv-j* i -m. =§- tatimm 1 3a~ 1 3n^*a it #ecm^ 

^mvtzm^ -^(D^mw^^m^thmmvx^m^mnir^^ 

[0119] J^Tt-. ^^^CD^^^BHjf^^O— ^JS^^T*fc<5='>^>'^gB<fv'^- 



50 



[0120] <^l/^l/yW&^7srJ>>2<D%1$> 

s<l 2kttit>^Wl 3a~ 1 3n^tL^tllRlCT:fe5o 
[0121] SiTf-, ^^^©SiBBfS^T 1 ^©— ll^^1ii^feS«iBfI^^20^«BK: 

[0122] rJ^b©#^SI^-o^^T^3BBlC»W•rs„ £1\ H|gfT^^2lS.W-^<22 
S:t) ^ S:m^g23a~23n©^ii^)^f-oV^TElM^/^Tl£PJ-r^o 

[0123] <mmn-t>?2i<7>m!&> 

m!ffirb>*21f£, ^35{d^-r«t5fC. JRBgiW»»211 % »=WJ««4feJSfc»2 
12. £^«#Jfc*»iMftttll3. ^^^^»*^^215. ffiSUfif 



M(ommi\^n^m^m^^2^(D^mmmMmmn^mi3tmm 



[0124] (i)m-umu2ii 

PbI© (#J : 1 B S^l^NS) "ftifWii^ f§— ftJ$>£R21 1 
[0125] (2)»=fi9J1*«£jStt212 

2i2it, f§- *khbs££j£$&2i 22t x 36*b«j**ns. 

[0126] (2- l)»H^7 l AMa(3k#^ritSS212l 



51 



^REQEMMIII^faUt^. 6^©^— ■ ^^AM^M^S'J^SPGIID 
l~SPGnD6<D^^tbl-MLr, fg— ^^A3$»ffcl${SPGi:U SPGI2 % S 
PGI3. SPGI4, SPGI5. SPGI6}^^5ci-^ 0 ff— ^T«WSPG 
Ii(SPGIl~SPGI6)(D^tL^n(Dm^{COV^{4. Hi&£>ff^Jl£>#iK{f^X 
Al£[D#. IllS-e^i-cfc^l-. 5o(DM~ v-^Aig^^p: (s_i. t_JU u_i,v_i, 
c_i:im~6)^bfl?/#£*VCV^ 0 ^-tL^tLO^— >^A^»SPGI1 
~SPGI6fi, ~>^A^^^ifc£;&^"s_i*t_i=u_i*v_i mod 

mxE-r-5^H*iitf^^225. ^H*^li^^2308a^^J6*ilCDfi:iU 

"{4-<#^»^i:-efet). m«2~{4}J3:16£;tB£U i^mi^m^T^V^ 
Jg— A3gp^«!^lJ^-SPGIDl ~SPGnD6fi. -^tL-^tL©^— v-J^xA 
M^WSPGIl~SPGI6{e:M^#ttbnfclES'J^fe9. ^^fiM 
tt&mmX'&Zo 6j@©m— ^^A«^Wf^iJ^SPGnDl~SP 

GIID6J3. g^m^l~6-Cfeo-C^J:v^. £Li&ret>&V\> &ik££j$«*-i£tc: 

M^m^B^SiJ^^-^^A^^m^^iatSPGIIDl. SPGI1 } {SPGII 
D2. SPGI2} • • ■ {SPGIID6. SPGI6}^bft5^H~>;*^Ag^^![S¥SPGIIl£ 

2^tB^-r^o 

[0127] (2-2)Jg-^«±i&£&2122 

*VX, S:m^mmS'J^AIDa~AIDn$r^#^-5„ ^LT. ^-f^f l£Mf£5»AI 

Da t>PtLT, mE.i/^^w&^&spGm\c^tin&6m<Dm—^^^&m 

S¥SPGll~SPG16^"^^bs lo©I- '>^x^S^ii^5riil^i~5o ZJO\o<D 
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IDa^ML-C314RU/ciiSr. |g-M'»SPGIii:L (SPGIifiSPGIl~SPGI64> 
^T*i^) N SP&^gcSPGIiH:. 6i©f- ^7 l Afe*^jBts_iRtjet_iS 

A»^^s_i. t_i % u_i, v_i. c__&m^ ^fr^z-btiZ>m®HkmWt4Ef&£:' y 
x*y=c_i mod N"Sr«fc-fJ:5*2o(Z>fli9HtaC5fac. y&±I&irZ> 0 rrT\ 2 

. *fc"*"tt*JfS53lL«>-^*>9. 0O;ttf2 * 5f±lO«r«!*U J^IUC;t9£-C/B 
icffii:LT^U'©!g'Kb^^^;"x*y=c_i mod N*te-t©WMfcS8fcc 

fl;3BBcx&— ^-r^SiKb^yf*#^-T5o *<Dmmk3fflu&L 
Xfy&m^Xs W^;tb;?x£4o(E>^— ffiBU4 , IHM^j£5£"mkIl=s_i*x mod 
N'\ "mkI2=t_i*y mod N\"mkl3=-vi_i*x mod N'\ "mkI4=-v 
__il *y mod N"(cS<3#4fiO^-Wcpra^mkIl, mkI2, mkI3. mkI4£r 
£j£i""3o -tUT, -^tf^HBtf)^— ffl»JH»IBIfenkIl s mkI2, mkI3. mkI4frtbm$. 

%— |@BiJ^ITOPENCMKIGa=Enc(IKa, MKIGa)£U Sfi^lKSBU^AID 
a5:^-^^mSPGIi(C^i-5^-^^A^^mi¥mSiJ^-SPGIIDi(SP 
GIlDiHLl~SPGIID60V^ti^)lc:*M^W-tt6o ^LT. ffeOgfi^fiS&B'J^AI 
Db~AJDnK;#LT^[TOKLT, flf-^bSfc— ' l@S'J'P^iiS¥ENCMKIGb. 
ENCMKIGntU ^ft^ftOglS^flHS^'J^AID^AIDn^— S/^AgHB 
»^I$S^SPGIlDitC#jStttt£ 0 ^LT, m38T'*-r«t9^. gfg^SliSS'J^ 
AIDa-AIDn^T^Bf^^m-ffiSU'PF^ii^ENCMKIGa-ENCMKIGnR^ 
-^^A^^m^S'J^d^^^n^H-fSlSiJ'tffSEMMllI^^U. 
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mmn 303aT8t #flj£HB#J*ra^^Hfci-5R^sv ^m^-fkT^y 

[0128] (3)^>^^««^^W215 

S^»^il^2l21^^mH^^A^«^SPGIII^Sfibfe^. 
^H^xA^^^*-a-SPGIII^ s U— ^22— fplJtT3Hgi-5o 

[0129] u)mmmmmMmU2i6 

mmm mmmm U2i 6 « % s&Hflsiflra^fifcsra 1 2cdm— * pm^£/&£B2 i 2 

2/S>blflH{@SU1t#EMMIIl£SftLfd§^\ ^(Dm^m^m #EMMIIl£, s« 
^S23a~ 23n— Ir] i j-TlBif "T^o 
[0130] <«^Sfrt^2i©ibf^> 

£*JLT\ iiB : ?T-fe^2i©^{cov^Tm^^tTofcd^ c:r.-cH:«gstT-fe^2 

{fi-5©tCl^il^1f^^^^22^tm^Sm^g23a~23n}CiE{ti-St 
#<Diljf^lc:ov^T039{^-r7n>- ^-b^v^l^0J-T6 o mH-OS'JIt 
^^^212^^H^^A^^m^SPGlIlS:t/BH'f@SiJtf#EMMIII$r^ 

. [0131] ««3StT J fe>^2lt«I:5«lfflf*E«i$©»f^> 

MMHI^ttS^I-rSo (S2101) 

fgH^SUtf#S£E££G2l2l3:, 04OT^-TJ;5^7D— h(TlST*B¥*ffl^lft^ 
) (d^oT, ^Hv'^x^M^^SPGIIlS.^H^IS'JIf $6EMMlI]=lr£/£U 
^H^^A^^mS¥SPGI]l^H^xA^»^m^^f^2l5^fctl^l 
L N fgE.fiSiJttf«EMMHIi£:mHffi!SiJifaiama2l6— tB^ji-So (S2102) 
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*<DME.Z/XTJ>m&&$^SPGmfrf---s*22^Skf5-tZ> 0 (S2103) 

#EMMIlI^ft^S23a~23n~«{WU fcTtto (S2104) 

« m= ^^A^a^^SPGIIIS^^mH-^S'JIf fgEMMIIl££/&B#cDl&f£ ( 
;*7 t 3^S2102©P&Hfft§H) > 

2121J4. ^:ti^ti5o<OM— ^f^^lc(s_i, t__u u_i, v_i. c_i:i(il 
~6)j&»fefc3. J5— V^^aW&SKafcS^fSPGIl. SPGI2. SPGI3. SPGI4. SPGI 
5. SPGI6}£±J&U ^— i/^iN^^«B^»JT-SPGIIDl~SPGIID6(D^- 
tL-en{C*fLT^<5(t^o (S21021) 

Rt/m— v-^-r^-M^W^iafSPGIIDl. SPGIl} {SPGIID2. SPG12} - • • { 
SPGIID6. SPGI6}d^b'feS|lHv'^AM^^SPGni^^L-C. IEv7 

^as^^«h^-^^215x^— ^ra^^m2i2^ffi^j-r5o (S2 

1022) 

g*fj£'lt SHMftSPl 1 3(3lT^-ir^L-C, gm§£«f&BU^AIDa~AIDn£&#-r5 0 
(S21023) 

mE.^^mmmmmspGm^mvtcm~-^mmm±mmi22^ 

^J>m&^WMSPG\\\\Z.^%lxtt{®<Dm-- ^7St AS$£4BS£SPGI 1 —SPGI6 
(Dohfrb, lo©i- ^xA^$ggSPGIi(ifil~6)£il^U 5{@<7>f§— >^ 
xA|^3E»s_iRm_iXt^u_i&TJSv_iX Vc_iSrttaii-So (S21 024) 

f IBMt»£j£$P2122tt, 5^<D|g— ^>^A^«s_i. t_i, u_i % v_ 
i.c_i*StC, ^fe^e>tL5teS'Ht^»^JcS:"x*y=c_i mod N"£rMfc1- 
i9*2oOfiSU{t3E»x % y££j£1-5 0 (S21025) 

^P5M£/&SP2122te. ^©te9Hfc£$^UV&JB<' v C, ^#>J3-z_htlZ> 
4<><D$&—B%WrM&&&."mkn = s_i*x mod N'\ "mkI2 = t_i *y mo 
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d N'\ "mkI3=-u_i*x mod N'\ "mkI4=— v_il *y mod N"(e:S<5# 
imcDm—mm^mmmkll, mkI2. mkI3 % mkU$:±f&-tZ> 0 ^L-X, ^©4#© 
m— fiSiJ^^mkll. mkI2. mkI3. mM4^m^ti^m30X7jkirXo^— 
^SU^P^^MKIGa^^-T^o (S21026) 

^m^xhtixi^^mmwm&i^M^x, mymx% 0 (S21027) 

^k^-mw^mmmmv^xibntcib, *T^s2i029^mt? o t>u ±xco 
^itmmmm^-Aiua-AJDni-Mvx^itm-mm tpmmm &mv ^ xbtitc 

b.^^7°21024i-M-5o (S21028) 

ig— xpmm^±^2i22^^mmwM^ii L AiDa^Mi)TiR^^[:m--m 

m <P P^itS¥ENCMKIGa~ENCMKIGn&t£Sg— i/XT -M^SSSWfcSWlJWb 

mmm^2i6\mt)ir^ 0 wr-rz> 0 (S21029) 

fcl/Y-c, ^22©«fifc£»ftM£oV^CSfcW£fT5o 
[0132] <-tf-w*22©*fifc> 

ga{g^227. tj&^b«fi£$ns„ ^*5. *^r«^j*t*i23tc:BBL-ct±. m&mmi 
<DmmB^^M^n^^m±f^m23tm^x^tz^.mmiim^i-^> 0 

[0133] (l)^f«Wi^fl^221 

^xA^2£^^S^221iiS.^^^2li6^^H^xA^fg 

Sr. El42-C^-ri^>^-A$i^^it^^222{c:|&^L, *^£J&£&123^ 
[0134] (2)^xA®HB^»»tt$P222 
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^7 t A$^^c^^$p222H: % m42X^-tXo \zME.U^rJ» m&^W&M 
^SPGIIIS^^i-3t><D-efo5o 
[0135] (3) mE.&m flf#±j£«S225 

i¥sPGin£5i#U ^©*pa»b6ifi©£— ^r«i»ij?tl- ~>^^a 
®H&kffcSPSr»aJi-5o -tb-c, -ia@ ^^^»f^sij^-spGiiDi 

mt?feS 0 ^LT. ^*#x.P>tL640©l^|^Sc^j^S:"rl =s_l *z+v_l *m 

mod N'\ "r2=t_l*w+u_l*n N*\ "r3=u 1 *z+t 1 *m mod N 

\ "r4=v_l *w+s_l *n N"£rXfc:. 4o(DB^^rl. r2. r3. r4^^i~ 
5„ ^UT. ^bfc^^^rls r2, r3, r4;5>b«$c£*L5, 020X^^-^5^^ 
^ScPPRG^^U (r*L£l«»PRGl t-f 5) . ^©tf^PRG^- 
^7"A^^liS'J J FSPGIIDlfC^#^6 0 *iI«P^#SMK^ 
£>^;LW51J— ^S«P^S^£^:"SMK=2* s_l *t_l * (z+w+c_l 
+ n*m) +2* (u_l *s_l*n*z+t_l *v_l *m*w) mod N"M;g<5l^ 

s ^(DH^^^W^ENCSK%^-^xA^^^mS'J^-SPGIIDlS.O ; « 
SK»#PRGti*t^:M»t5. ^UT, f&cD*&tf>fg— v'^A^^i&i&giJ^SPGIID 
2~SPGIID6t^— >^xA^^l$SPGI2~SPG16{c:*fLT. SPGIIDl^ 
<ID#l^ B#^^WPRG2~PRG6<bBt-^M*WiiENCSK2~ENCSK6>lr^ 

PRGl~PRG6£B£#W*^#teNCSKl~ENCSK67^b^5. 12l43T-;^-r.};9=k 
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^i-^S{f^«l3a~l3n©#^H*^-|i^#^23O8atc:i3V>-C0t^--fb*^"liE 

[0136] (4)#aHt*ffifgg&227 

#3ii»«iB«227r4.»=*iiflm^«22536^*=#a««CMffl«« 
V1tm&. S«§6«23a~23n-^©fE=#aiflWBECMni*Eflr-r*. 
[0137] <y—;<22(DWi J fe> 

HSrJBwn&Ki-S. ^^M»l^*^SfB^221*^^^^ 
^ ^^-/^22^fi^«23a~23n— 0rfc^*W«iSK^SH«-r-5^Ott^lCO 

[01 38] « |i^^>-^21d^^H^^A^^^*^SPGIlIS^g«L.fc^FCDib^ 

> 

PG11IS^>^AM^M*&^222^^L. ^T"f-5o (S2202) 
<<i j-_ / <22^g{f^g23a~23n-. gr7cft*^SK£I£m^5f^Ibf£>> 
##«£feJ5ft*W23tt. #«SK&£/£U ^H*iitf $g±^225-ttJ^-r5 

0 (S2251) 

+tn-^^j*mmmm*itoi&-tz>a (S2252) 

|->7rAif||s_i, t_i % u_i. v_k c_i£rttaiU 4o<D£L£kz, 
w. m. n££/£T3o (S2253) 
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+v_i*m mod N'\ "r2 = t_i *w+u__i*n N'\ "r3=u_i*z+t_i*m 
mod N\ "r4=v_i*w + s_i*n N"%m^ 40(DB#^ifcxl s r2. r3, r4& 
^-T>5o (S2254) 

3b$L7tl«'«rl. r2. r3. r4^blff/&£*v5, 
f^t^PRGMtSo (S2255) 

JgH*iIt*^£/*£&225fi. itiS^^liSMKS:. ^if 
F^|^/&5£"SMK = 2*s_i*t__i* (z+w+c_i+n* m ) + 2* (u_i*s_i* 
n*z + t_i*v_i*m*w) mod N"icSoV^-C^-T5 0 (S2256) 

^— ^xAM»mS'J^SPGHDlSU J NF^^#:?¥PRG{c:*j-^:#fi'^o (S22 
57) 

MH*iHf#^^225{4. £T<Z>*!©fg-v'^AM»mSiJ^SPGlIDl 
~SPGIID6l^br, ^^WPRGl~PRG6^Bf^k**liENCSKl~EN 
CSK6?r^bfcb. ^5/^S2259-iitf 0 iT©ll©I-^fAi«f HI 
g, JT . S p GIID l~SPGnD6&£*|-LT N f«»S¥PRGl~PRG6tfl£^*^i§i 
ENCSKl~ENCSK6££/&LTWj^o7cbs ^:^S2252^ M5o (S2258) 

JgH#Slt#&£^225i:£, ^-^^AW^mi^'J^SPGIIDl-SPGIID 
6XU J ^F3E^i^PRGl~PRG6XU t BiP-§-fb*^r«ENCSKl'-ENCSK6 

#=#jfifltMCMffl&ffrfcU *iltt#SHif ^227^ tU^i"5 0 (S2 

259) 

*5itt«iBflr227l±,S{B^«23a-23n^*=*ifi««ECMlllS:E«"r5. 
j^T-rSo (S2260) 

, Sfll gfi23a~23n<Z>*J*£I&f1^0^TIfcW£fT5o *i\ ^M23a^m 
j£fc»fEfcOVvCiftf§SrfTV\ ftt-s S<S^a23at<fe©S^ 2£fi23b~23n£© 



59 



[0139] <&4mmW23a<DMj&> 

S^«23af4 % IH46{^-r«};5^. MJflMft3£fMS2301 % JgHfiglJ «f IHMtig 
&#gP2302a. «J|*|£iPftgfl2304a, WJi£imttlfi3|S2305a % #&W#Sflr 
£fl2306a. MH*^"H^#lFP2308a, W^J§P1310, ; fcd*b«^$tL5o ^ 
HfflJS'Jtf RWK^Sl#$P2302a, ®SUIt*&3ft$li2304a. ^B'J4 3 P^^&#3gB2305a 
% Jtillf $g^{f ^2306a. fgH#^T«iSl#$P2308a. tt^^g23a@^r©fllfife 
H5SlT?fc!9. fiBUflNR£tefiS2301. ffl^J$P1310. {i^-fS^fi23a~23n{CjoV>T 

[0140] (lM@SiJfimS{fSB2301 

ffisuif 3RSflr«K23oi^ ^22^. nE.mmmm&EMMm&%:mutm 

o 

[0141] (2)m=m%itpmmmw&m302a 

fEiSiJ Pfl»»]&#aJ2302aH:. <@JBUffif #Rg^230lJ&>b&3B#Jffif#E 
MMIII^gffUfdt^ *1*@47K^M-i5*fiS'J«*&j(rt$IS2304ad>e>^3Sil 
B»giJ^AIDaXl«BJS'J»IKaSrSl#f S. SftUfc^H^SlJ'lt^EMMIII 
teSU^3ft&2304atCfti&te;ivCV BW^&l^AlDa^Mf^ir^ 
^K«»ENCMKIGaSr5t#i-S„ ^©t, ®S'J|iIKa$rS{C % Bf^kM 
-ifP^#iPENCMKlGa©«-§-^^fTV\ IR— <Pf^#iig$MKIGa&t^— ^7 
A3$^iScgmSU^SPGIIDi£$?#-r5o Mt, tpEUfcPMKIGalfc 
t^B— v'^A^^^i^SiJ^SPGIIDi^r, m48X^-tX0^mm * IHMMftft 
g&2305a— \Zl&m-tZ> 0 
[0142] (3)fSISiJli*&ra2304a 

ffiSiJ«ta-*ft$p2304att\ H47T^i-J;9(-. S^SSSJS'J^AlDa&rJHBS'Jfill 
KaSrfit^Fi-St^'CfoS. 
[0143] (4)<@S'J c pra«8&*»JSS2305a 

®S<I^F^*a$3£lS2305al3:. 11481?^^ fiBU't'FMlfcMKIGaS. 
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[0144] (5)*iifimgff£B2306a 

m%\<P |SJ WMlMfP2305a K7*-fc*U fg— figij f HMB¥ MKIGa&T>*Jg— 

-fk*^r«ENCSKiSrj*tH-t"S. *<D&. %— !B»J^IBI«K^MKIGaXl^l$3aS»[ 
pPRGiXt/Bt^t#^#ENCSKi^H^^«i®#S2308a^tB^3-t-5. 

[0145] (6)JgH*^#K&#£&2308a 

mH**«iBl#§P2308a^. #^TO2306a^Sg-®SU™#^MK 
IGa^I>^|^'»S¥PRGiXOT^-'fb* ; titENCSKi^S:fBbfcm-^.-^<^B#^ 
^ifcg^PRGi^b, Nf^iCrl, r2 N r3. r4£r2&£Ui-£ 0 ^bt, H— fSS'J 4 1 
MKIGad^B— 'l@S»J4 , rafi&nkIl % mkI2. mkI3. TD^A^W^f^ 0 *:<D%k, W 
^X.hfL^^m^W^M^m±^rSMK= (rl +mkll) * (rl+mkI2) + (rl 
+mkI3) * (rl+mkI4) mod N"t:SlC. #® * K«SMKfc£j&-f £«, ^bT. 
^L^ii^KftSMKSrSJc. BS-^k*^T«ENCSKi*«-M:b, *3f«SK 
-5a ^bT. -^»*^TliSK=SrtB^lfi51310— ttJ^-TSo 

[0146] <S^S23a©Sjf^> 

£*JhT% g^fi23a©*j£Ko^T&|l§&fTo;fc:8S. — t?^m^iB23a©» 
f£K:<^-ClfcSJl1-5o *1\ MH^SiJtf^EMMIII^^bfci#{c. fg— i@B'J 
cpr^^MKIGa^#-r5^(OSb^l-ov^TEl49fc:^-r7n— Y^M^X 
mW-tZ> 0 SgH*iitimECMIIl£g<f Uct£t-> M-fiS'J ^P PMifcMKI 

[0147] «|i^n-fe>^21d^^Hi®S'J'lf#EMMIl]^Sffbfc^Oi{)^» 

«^-feV^2l^-bmHf@S'J1ffg?|EMMIIl^g{Bb/c#lSiJtffSS:m^2301ft 

N mE.m%\ffinEMMm&mE.m^mm&%L&U2302a^i)it)irz> o (S230D 

m = imm SBEMMlIlSrgfs bfc^H <@B'J f» FM?¥Sl#gB2302a{2. fg)SiJit*& 
^^rP2304a7!)^b^{B^mf^S'JT-AIDaS:TJ ? {SlSiJ^IKa^#-r5 o (S2302) 
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mBNCMKiaRum-^T^m^Mmmm^spGUDa^mn-r^ (S2303 
) 

a^#i--5o (S2304) 

m=m%n tpmm&m%$$2302ai^ m-m&i^mm^MKjGaRum—^T 
MU&^m&mM^spGima£mffl*mmfa&U2305afc&%to-tz> o i^T-rso 

(S2304) 

«-^- ;<22frbM=&mmnECMm&§:mvtcB%<DW)ft> 

s<22frbm=^mmn&cMm&^mvtc&mmn%:im2306ai^ mm 
mm&%hU2305afrbm— ®%\ * mm^MKiGaRxim— ^^rJm^^M 

I^S'J^SPGnDa^^#-r5o (S2351) 

i-^^^m^PRGi^^Bt^b^iiENCSKi^ffla^-^o (S2352) 
*Slt $gS<f £P2306ate. fg-^E'J I 3 F^?¥MKIGa&T»«i$:3¥PRGi& 

T jc B t^^^-|iENCSKi^H*^-ii^#^2308a^l±5^-r5o (S2353) 
%^J^m^M^2303a\-X. Bf^MPRGi^. B^g^Ifcrl, r2, r3, r4£ 

ttffii-?> 0 (S2354) 

^H*W^^2308a{^. fg— BRl "PF^Ii^MKIGa^^^— f@E'J * f B l#mk 
Il.mkl2.mkI3, mM4&$MiirZ> 0 (S2355) 

^H*Wli^^2308a{i. W-^WSSff ^M^il^^J&sC'SMK 
= (rl + mkll) * (rl+mkI2) + (rl+mkI3) * (rl+mkI4) mod N"^S(d, 
^•PFb^SMK^^^-T^o (S2356) 

|£H*^£^#£fS2308ate, ^Lfc^ii^F^SMK^g^ Bf-ig-fkH^ltE 
NCSKi£«-§"ft:U &^mSK*m%irZ>o (S2357) 
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m=&&mW&U2308a}^ *<D#&mSK£tiijjMl310^m2)-FZo (S235 
8) 

3 D (S2359) 

^W^g23a^cD^^23b~23n£(^tes,6ii. aT^S^-efeSo 
[0148] (i)MH-f®SiJ4 i miiif^#a52302a-t:\ JS = f@SU ^ Ppg^£^#1-£7tfc f@ 
^IJIt*&^gI52304a75^#5Sfs^TOS<J^-^«gUii^^ ^tl^;ft,<Z)SlH^S2 

3a~23n-e^?i5 0 

[0149] (ii) m^mWi^U230AaX\ fe^flX^^m ^gs&SWAJDa—AID 
n) ST/TOii (IKa~IKn) «tL^ncDS{H^e23a~23n-e^^o 

[0150] (iii)#isiJ4 5 P^ii^tP2305ar% ^^tLTv^m-m^^li^^— > 

^^mmMmmm.%n^^n^(omwmm23a-23Txxm^ 0 

[0151] (iv)*iltt^S-fB^2306a-T?. •f@SU' : f I ^^^^2305ad^®L#-t-5^— -|® 

S>J4'F^liP^tJ ? m-^^M^WB^SU-^^^tLm©S^fi23a~23n 

xmte&c 

[0152] (v) m=*^li^#^2308aT% *^SK^^#-T5K{-^ V fgjgij ^ IB] 

Hi¥«tb^tL(DS^©13a~13ii-eM^^ 0 
[0153] <«?f#J20®]^IIE> 

« w^2tc*5i/ vc. : tn^(D^mmm23a-23n\^-im^^t^m-' 

m&i^mmUMKlGa—MKlGniimT^XhtlX^^Zh^^hir^ ^jf^g 
23a~23n(CjoV^-C|H]C^|tSK^^aitfci^5S*(C-oV^«. mfc&Mltm 

[0154] <nmm2(D%h$ik> 

o 
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[0155] 

[0156] (i)mm s§io(±. M±&jitemmm(DijkmMxfr<>x i b&i<\ 

^mmi^is^i^^±^-^i2ii^mm^i5^\cmm^nx^iy^j>.m 
^mMM^spGs^m^^t^x^x^y^^m^mmM^spGs^ 
n-tz>£?Ki,xh^\ ^x\ "smmmste. wt&, 7^>//vt^^cd 
-ROM^n^m-RAMm<Di$mmmtfcxhz> 0 m^o-c, m&n^fu 
t^-y<i2ibmmm^vxmm^tix^^m^<^ 0 &*5. «^2{^*5 

[0157] (3)mmmmi\^^x^mmn±^iiiK^-^^Km--mm^mm 

gpi25iri. *ii^K«iSi#$pi252^a»z. w. m . n ©ftb!>{^ 9£^«pr 
i22^7^-tr;*u mm* mmu^mmu *<oq*i&M— wj'FBMfcnkii. 

mkI2 s mkI3. mkI4«rStf*U £«Lfcl^g##PRG©*a>b. B#«ifcr 
l s r2, r3, r4&ttfflU ^©gL #»«t I IB«SMK«:. ^£>-§-X.WL5g:ft ^S*il 
■PFM^J&iCSMK^ (rl +mkll) * (rl + mk!2) + (rl +mkI3) * (rl +mkI4) 
mod N"&SUl£/£-r5±5KL-T?b«fc<'\. ^tUdioT, V—'<12<D%— 

[0158] (4) iy^M.mm^m±^tm%m^^^.t^-m^i <p mm±f&&tm& 
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M&m t pmm±j&tt)K mmtis&k** y^/ux^mn^ -en-eft v\, 

[0159] (5) lO©^T^^i«l:ffi^T->77^ti?|SPG^^LT 
[0160] (6) loc0^lJ'^t:^^i^MV^-C^'J'^t»^MLTV ^c^ % 2Wm£t± 

ftv\, 

[oi6i] (7)4^(om—mn*mm±j&ttm^x^mm&±f^x^tzjbK 5mmsn± 
(Dm— mm * vm&s&&m v issu * mmt±&a,xb ft v mmsi 

[0162] (8)4^<Dm^m±j&ttm^xm^m&>RG&±j&LrX^tii>K mmu 

m^m±f$ttm^^x&^mmpRG$:±f$.Lxh£ki<^ £b\u~i. 

r±SLafre;feo-ob.fcv\, 

[0163] (9) 10(Di^-/^*ii4 3 F^^^ffi^T*iS c l :, ^^SMK$ri+^LTV^fc^ 

[0164] (lO)!OCD^f^ffi*ii4'^it^^ffi^T*S c l :i P B ^SMK^§+^LX^ 
TbftV\, 
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[0165] (ll)gfB gflH£a<f>ffitt£j&£ttU ^X©g{s^*13a~13n. <bL<{3. gfl 

[0166] (12) mfeMmi \Z55^X, #0-ffiSiJ^F^ii^MKIGa~MKIGn{i, 4o©f 
—- ©S'J^figi&iikll. mkI2. mkI3. mW4>6^fif /&£nTV yfc#i\ 5o.£/._btf>Sjf— 

[0167] (l3)B^^ffcS£PRGJ2. 4o©B#«iS[rl. r2 % r3. r4frbMf$.£nX\,^tc1)K 5 

[0168] (14)lKo£H»<7>§{f£Em^ I^C^SUli^— (@^J4 5 ^li^^--(!ilS'J4 J 

[0169] (i5)mMKmix*i-±. m~^"r^^m±^ii4m, smo^m-i/^^m 

mmal, k2. k3, k4, k5. k6. MLTV^fciK 7^SX±<Dm^>^^U^ 

~is^TJ>.ffl&m&}$^114imom<DM—^^J* r &&mLU k2, k3, k4. k5, 
k6. k7, k8, k9. kl0^r^UT%J;V\ ^<Dm. %$—^^J*W£^%L&S-PGJlK 

^tL&m~^^m^<v&&^z^ticf£z> 0 mutt. %-is*TJ*m%m 

±f&114lX10®(D'%—^7 L J*W&mkl, k2. k3. k4. k5. k6, k7. k8. k9. 
kl s k2 s k3, k4. k5. k6. k7. k8. k9. klOSra tKLir^So 

[0170] (i6)m^&MmiRummmm2^id^x, mt mm*. ^msK^mti 

m^-it^v-^y^itvx, ^msK\zm^^xm-^it^n^\ ^>-r>^^ 
#u ^t(o^T^y^w^in^ii-hXo^xh^\ 

[0171] (l7)^^Bgl<Di^-^<l2T{i, 3?-*®^ #£j££in25<bL<teSg-*i§'lff 

1 26<zn ^m^£iliRU m-*il'lt^ECMi^L< lilg - *iitf mtc 
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-?tlfr&m&lLX, 1 3a~ 1 3n-«lf 1" 5 £5 f-LT^ \ 

[0172] (l8)^^li-^V^.^tT^^ll^SiJ'tt«EMMG^iB{f-r5^}- 
ft. git ^gl3a~l3n— (Hl^tCiHfg Lttl^L, #S^Sl3a~13nffiSUK: 

^Ml3a~13n— I^H#^IB«LT^^V>U #Sff ^gl3a~13n^SlJf-gB{i 

[0173] (19) HJfi?g«2Kl*5VN-C. ^H^^A^|^^SPG1IIS«. f-'^rA 

[0174] (20) mmm2\z.^ vr\ ttsBfrfe^^ijBss&Hfigijw «#EMMin£Eflr*- 

^«^g23a~23n^PB#fc:gefBU-Ob&^U £-g:fS3£ff 23a~23n 

HHUt-, SftS«23a~23n^lRlNFlCga«L-C%^V^U #g-f§^a23a~23nfi 

[0175] (21)HJ£^ffil-ef*. ^w<i2^^ei3a—13n— *ilffif«ECM^@I^BU 
TV^5 % ^wn2^ft^gl3a~13n^i?>*ii(D*5iW^ECM^3iit^ 

fil3a~l3n— @a{fLT. ^{f^m3a~13nTiigm^*iiW$&5$SlJ^-&S 

#j£«*i§tf^ECM£^#i-5J:5i-LTk&v\ 

[0176] (22)^»tiiic:io^T. mmi^fute. ^mmmm^t^(o^mmm. 
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[0177] (23)HJfe^lt-*5^-C. li^-fe^llt-li^— WJ«a^JiJEfiS&tfSE-fl 

1 1 tsu ^ei3a~ 1 3nic*5v v*\ w\^¥&£M%$t®&i mmm^mmmc 

[0178] (24) Hjfe^ffii icjsv^-c. 1*--^i2fc:f3:Jg-;£iItit «4fej*»Xrf»zi*iiflf 

*^T«iSl#$Bi6 s fco-Cfe.J;V\ -^w<l2i:g«^gl3a~13n{-*3V^ *iitffg 
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